There are two programs in a VNC software, the server and viewer. The viewer is used to connect and remotely control the VNC server while the server simply listens for incoming connections from the viewer. The VNC server acts like many of the online services (such as WWW that uses port 80, FTP on port 21, etc) where it requires a port to be opened in order for the viewer to connect, unless you are using the reverse-connection method. The VNC server uses port 5900 by default and it can be easily changed from the VNC server options to provide extra security so that it won’t be instantly recognized as a VNC server service running on that computer. Most of the port scanner checks for open port on a machine and assumes that it is running the service associated with the port number according to the RFC Internet standards.
Today we’re looking into scanning for VNC servers with more accuracy rather than checking if the port 5900 is open.
(more…)


